SecurityWeek

A new ransomware scam has taken an interesting twist – rather than simply demanding payment, the attackers want the victims to fill out a survey. It is a new tack for a scam that traditionally relies on threats and intimidation, and perhaps a foreshadowing of what is to come, noted Malwarebytes Malware Intelligence Lead Adam Kujawa.

A National Security Agency (NSA) program designed to discover security vulnerabilities at critical infrastructure companies is in full swing, according to documents reportedly obtained by the Electronic Privacy Information Center (EPIC).

Cybersecurity teams should focus on security resolutions rather than predictions.

As you embark on 2013 and evaluate your security risks for the coming year, what should not change in terms of your network security focus is data center security.

Peter Winter-Smith, a researcher from the U.K., published an interesting exploit for the NVIDIA Display Driver Service on Christmas Day, which enables an attacker to install a user on the target system, completely bypassing Microsoft’s Data Execution Prevention (DEP) and Address Space Layout Randomization (ASLR) protections.

How to Identify Security Issues Before a Data Breach Occurs

South Carolina Governor Nikki Haley has asked for $6.3 billion dollars in her budget plan that addresses the state’s fiscal calendar for 2013-14, which starts July 1. Of that, $47 million is for IT spending.

Tehran - A local civil defense official denied an earlier account that a fresh cyber attack on industrial units in the southern province of Hormuzgan had been repelled, Iran's state broadcaster website reported Tuesday.

Tehran - Iran has repelled a fresh cyber attack on its industrial units in a southern province, a local civil defense official said on Tuesday, accusing "enemies" of nonstop attacks against its infrastructure.

COLOMBO - Police in Sri Lanka arrested at least 114 Chinese nationals over an alleged Internet currency fraud, during a string of raids in and around Colombo, officials said on Saturday. The arrests were made after Chinese police sought assistance from their Sri Lankan counterparts in cracking the alleged fraud ring. "They were charged under the Cyber Crime Act," a lawyer who assisted the inquiry but did not wish to be named told AFP.

According to TrendMicro, Google Play and two other top third-party app stores are hosting a combined 1,730 malicious apps as of the first week of this month. As December winds to a close, it’s estimated that tens of thousands would have downloaded them.

Just a week after issuing a patch to address a critical directory traversal vulnerability (CVE-2012-5978) in its View server products, VMware on Thursday issued several security fixes that affect multiple product lines.

Santa Doesn’t Care if You Were Naughty or Nice on Christmas Eve – What Matters is How you Did all Year. Security is Much the Same.

BEIJING - Chinese authorities, who have long sought to limit access to information, seem to have reinforced the so-called Great Firewall of China, frustrating foreign companies and raising activists' concerns. The Great Firewall -- the country's huge system of Internet limits and censorship -- now appears to be stepping up targeting of virtual private networks, or VPNs, commonly used to circumvent controls on websites the government considers threatening.

Facebook to Charge for Some Message DeliverySAN FRANCISCO - Facebook on Thursday began testing the feasibility of charging to guarantee that messages from strangers make it into inboxes of intended recipients at the social network.